Most AI security conversations are happening in the wrong room. While executives debate governance policies and compliance checklists, the enterprise’s actual security architecture is being quietly and quickly rewritten, mostly without permission. The real exposure isn’t in the documents. It’s in the employee who used a personal chatbot account to summarize last quarter’s client notes….
Day one of the 2026 Gartner Security & Risk Management Summit covered a lot of ground. I was only able to attend six of the many sessions. A few that should make every security leader uncomfortable in exactly the right way. This article summarizes what I took away, along with some key points. Leadership Vision…
Healthcare compliance used to be a game of “good enough.” Not anymore. The HIPAA Security Rule update for 2026 doesn’t just tweak the old playbook; it throws out the parts that let organizations skate by. It delivers a set of cybersecurity requirements that lands with the subtlety of a brick through a window. Every healthcare…
AI isn’t just a new tool in cybersecurity. It’s the reason defenders are still in the fight. The old playbook is out. The new one is written by algorithms that don’t sleep, don’t blink, and don’t care about weekends. Understanding the Role of AI in Cybersecurity Rule-based security had a good run. Then attackers got…
The Rules Fell Behind the Machines AI agents used to be glorified autocomplete. Now they pull patient records, move money, and negotiate contracts. The shift from text generators to autonomous actors happened while most companies were still figuring out how to spell “GPT.” The result? Tools that move faster than the rules. AIUC-1 is the…
Your data policy has a gap in it. A big one. And your IT team probably doesn’t know it exists. Employees are copying contracts, financial models, customer data, and internal strategy docs into free AI tools. Not because they’re careless. Because the tools are genuinely useful and nobody told them not to. By the time…
The insurance industry holds vast amounts of sensitive personal and financial data, making it a lucrative target for cybercriminals. The nature of insurance companies ‘ databases, from personally identifiable information (PII) to credit card details and medical records, makes them particularly vulnerable. Cyberattacks on insurance firms have increased in frequency and severity, often leading to…
I sat on a panel at SecureWorld Boston this week called “The Human Layer: Insider Risk, Social Engineering & Behavioral Analytics.” The questions were sharp, the audience was engaged, and a few of the conversations stuck with me enough that I wanted to put them down here in longer form. We’re Measuring the Wrong Thing…
I’ll be honest with you. When I first started paying close attention to the AI conversation years ago, I thought the big risks were things like chatbots giving wrong homework answers or a spam filter being a little too aggressive. Cute, manageable problems. Then I actually started reading the research. And wow, did I underestimate…
Broken promises. Leaked memos. A patchwork of laws: no, let’s call it what it is: a slow-motion car crash. While corporate brochures keep shouting that Artificial General Intelligence (AGI) is just around the corner, the reality on the ground feels more like a fever dream involving 50 different state legislatures and a very angry White…
